Skip to content
Back to skills

Elasticsearch Py

ASecurity

"Guide the official Elasticsearch Python client for cluster

  • 247 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 8, 2026
businesspythonbashsqlrailsapisecurity

Works with

  • cli
  • api

Security analysis

A96/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro scans all 20 files and shows the line behind each finding

Scanned September 8, 2026

npx -y skills add VectorSpaceLab/AREX-Skill --skill elasticsearch-py --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Elasticsearch Py?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Elasticsearch Py
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/vectorspacelab-elasticsearch-py/badge)](https://www.skillsdirectory.com/skills/vectorspacelab-elasticsearch-py)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: elasticsearch-py
description: "Guide the official Elasticsearch Python client for cluster
  connections, generated APIs, async code, bulk ingestion, query DSL, ES|QL,
  optional integrations, and runtime troubleshooting."
disable-model-invocation: true
metadata:
  disco-role: operating
license: Apache 2.0
---

# Elasticsearch Python client

Use this skill when a task uses the official `elasticsearch` Python package or
asks for Elasticsearch connections, indexing/search APIs, async client code,
bulk helpers, the high-level DSL, ES|QL, vector-store helpers, or client
troubleshooting. The source snapshot is package version 9.5.0; read
[repo-provenance.md](references/repo-provenance.md) before deciding whether the
skill is stale for a different client checkout or version.

## Route the request

- **Connect, authenticate, configure transport, use generated API namespaces,
  or manage sync/async lifecycle:** read
  [client-operations](sub-skills/client-operations/SKILL.md).
- **Bulk index/update/delete, streaming, scan, reindex, or helper failures:**
  read [helpers-ingest](sub-skills/helpers-ingest/SKILL.md).
- **`Q`, `Search`, aggregations, mappings, `Document`, typed persistence, or
  high-level query composition:** read [dsl-search](sub-skills/dsl-search/SKILL.md).
- **ES|QL source/processing builders, safe parameters, or tabular results:** read
  [esql-query-builder](sub-skills/esql-query-builder/SKILL.md).
- **Shared install, serialization, version, or security failures:** read
  [troubleshooting.md](references/troubleshooting.md) in addition to the route.

For a cross-cutting task, load client-operations first, then the workflow route;
keep the client/auth configuration separate from request-body construction.

## Install and smoke check

The package supports Python 3.10+. Install only the extras used by the task:

```bash
python -m pip install elasticsearch
python -m pip install "elasticsearch[async]"       # aiohttp async transport
python -m pip install "elasticsearch[requests]"    # requests transport
python -m pip install "elasticsearch[orjson]"      # optional serializer
python -m pip install "elasticsearch[pyarrow]"     # Arrow/ES|QL workflows
python -m pip install "elasticsearch[vectorstore_mmr]"  # MMR helper support
```

```python
from elasticsearch import AsyncElasticsearch, Elasticsearch
print(Elasticsearch, AsyncElasticsearch)
```

An import proves package availability only. `client.info()` is a live service
probe and requires a reachable endpoint, credentials, and correct TLS.

## Guardrails

- Keep API keys, passwords, bearer tokens, CA files, and cluster URLs in runtime
  configuration or environment variables, not in generated guidance or logs.
- Prefer TLS verification with `ca_certs` or a supported fingerprint. Do not use
  `verify_certs=False` as a production solution.
- Generated client modules are specification output; do not edit files under
  `elasticsearch/_sync/client/` or `elasticsearch/_async/client/` to change an
  API. Upstream API changes belong in the Elasticsearch specification project.
- A bulk HTTP response can contain item failures. Inspect helper results and
  use bounded retries only for operations whose retry semantics are understood.
- A rendered DSL/ES|QL request is not server validation. Check target mappings,
  server version, privileges, response shape, and partial-result flags.
- Close clients: `client.close()` for sync and `await client.close()` for async,
  preferably with an async context manager.

## Verification entry points

Use the bundled offline checks when no cluster is available:

- `python sub-skills/helpers-ingest/scripts/bulk_actions_smoke.py`
- `python sub-skills/dsl-search/scripts/dsl_query_smoke.py`
- `python sub-skills/esql-query-builder/scripts/esql_query_smoke.py`

Read [routing metadata](references/repo-routing-metadata.json) only when the
managed repo-skill router is being rebuilt; it is structured metadata, not a
user workflow reference.

Files in this skill

  • SKILL.md3.9 KB
  • references/repo-provenance.md1.1 KB
  • references/repo-routing-metadata.json335 B
  • references/troubleshooting.md2 KB
  • sub-skills/client-operations/SKILL.md3.4 KB
  • sub-skills/client-operations/references/api-reference.md3 KB
  • sub-skills/client-operations/references/connection-recipes.md2.5 KB
  • sub-skills/client-operations/references/troubleshooting.md2.4 KB
  • sub-skills/dsl-search/SKILL.md2.4 KB
  • sub-skills/dsl-search/references/api-reference.md1.9 KB
  • sub-skills/dsl-search/references/data-and-mapping.md1.4 KB
  • sub-skills/dsl-search/references/troubleshooting.md2.1 KB
  • sub-skills/dsl-search/references/workflows.md2.1 KB
  • sub-skills/dsl-search/scripts/dsl_query_smoke.py1.1 KB
  • sub-skills/esql-query-builder/SKILL.md2 KB
  • sub-skills/esql-query-builder/references/api-reference.md1.5 KB
  • sub-skills/esql-query-builder/references/pandas-integration.md960 B
  • sub-skills/esql-query-builder/references/troubleshooting.md1.8 KB
  • sub-skills/esql-query-builder/references/workflows.md1.4 KB
  • sub-skills/esql-query-builder/scripts/esql_query_smoke.py1011 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.